CVE-2017-9650

HIGH

ALC WebCTRL <6.5 - Remote Code Execution

Title source: manual
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-9650. PoCs published by LiquidWorm.

AI-analyzed exploit summary This exploit leverages an authenticated arbitrary file upload vulnerability in Automated Logic WebCTRL 6.5 and prior versions. It uploads a malicious WAR file via the 'uploadwarfile' servlet, bypassing improper authorization checks, leading to remote code execution.

Description

An Unrestricted Upload of File with Dangerous Type issue was discovered in Automated Logic Corporation (ALC) ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior; ALC WebCTRL, SiteScan Web 6.1 and prior; ALC WebCTRL, i-Vu 6.0 and prior; ALC WebCTRL, i-Vu, SiteScan Web 5.5 and prior; and ALC WebCTRL, i-Vu, SiteScan Web 5.2 and prior. An authenticated attacker may be able to upload a malicious file allowing the execution of arbitrary code.

Exploits (1)

exploitdb WORKING POC
by LiquidWorm · pythonwebappsjava
https://www.exploit-db.com/exploits/42544

This exploit leverages an authenticated arbitrary file upload vulnerability in Automated Logic WebCTRL 6.5 and prior versions. It uploads a malicious WAR file via the 'uploadwarfile' servlet, bypassing improper authorization checks, leading to remote code execution.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Automated Logic WebCTRL, i-Vu, SiteScan Web 6.5 and prior
Auth required
Prerequisites: Network access to the target · Valid credentials (including 'anonymous' user in some versions) · A malicious WAR file
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/100452
Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/42544/
Mitigation, Third Party Advisory, US Government Resource x_refsource_misc
https://ics-cert.us-cert.gov/advisories/ICSA-17-234-01

Scores

CVSS v3 7.8
EPSS 0.0237
EPSS Percentile 81.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-434
Status published
Products (4)
automatedlogic/i-vu < 5.2
automatedlogic/sitescan_web < 5.2
carrier/automatedlogic_webctrl < 5.2
n/a/Automated Logic Corporation WebCTRL, i-VU, SiteScan Automated Logic Corporation WebCTRL, i-VU, SiteScan
Published Aug 25, 2017
Tracked Since Feb 18, 2026